Medium severity6.5NVD Advisory· Published Jan 14, 2016· Updated Jun 17, 2026

CVE-2015-8605

Description

ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

111

Isc/DHCP85 versions
cpe:2.3:a:isc:dhcp:4.0.0:*:*:*:*:*:*:*+ 84 more
- cpe:2.3:a:isc:dhcp:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.0.2:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.0.2:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.0.3:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.0.3:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.1:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.2:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.2:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.0:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.0:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.0:p2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.1:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.1:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.1:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.2:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.2:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.3:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.3:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.3:p2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:p2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.5:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.5:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.5:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.5:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.6:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.6:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.6:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.7:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.7:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.8:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.8:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.8:rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.0:a1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.0:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.1:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.2:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.2:rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.3:b1:*:*:*:*:*:*
- (no CPE)range: <4.3.3-P1
Sophos/Unified Threat Management Software
cpe:2.3:a:sophos:unified_threat_management_up2date:*:*:*:*:*:*:*:*
Range: <=9.318
Canonical/Ubuntu Linux4 versions
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
osv-coords18 versions
pkg:rpm/opensuse/dhcp&distro=openSUSE%20Tumbleweed pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1
< 4.3.3.P1-3.1+ 17 more
- (no CPE)range: < 4.3.3.P1-3.1
- (no CPE)range: < 4.2.4.P2-0.24.1
- (no CPE)range: < 4.2.4.P2-0.24.1
- (no CPE)range: < 4.2.6-14.3.1
- (no CPE)range: < 4.3.3-4.1
- (no CPE)range: < 4.2.4.P2-0.24.1
- (no CPE)range: < 4.2.4.P2-0.24.1
- (no CPE)range: < 4.2.4.P2-0.24.1
- (no CPE)range: < 4.2.6-14.3.1
- (no CPE)range: < 4.3.3-4.1
- (no CPE)range: < 4.2.4.P2-0.24.1
- (no CPE)range: < 4.2.4.P2-0.24.1
- (no CPE)range: < 4.2.6-14.3.1
- (no CPE)range: < 4.3.3-4.1
- (no CPE)range: < 4.2.4.P2-0.24.1
- (no CPE)range: < 4.2.4.P2-0.24.1
- (no CPE)range: < 4.2.6-14.3.1
- (no CPE)range: < 4.3.3-4.1

Patches

Vulnerability mechanics

References

lists.fedoraproject.org/pipermail/package-announce/2016-January/175594.htmlnvdMailing ListThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-January/176031.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-updates/2016-02/msg00162.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-updates/2016-02/msg00168.htmlnvdMailing ListThird Party Advisory
www.debian.org/security/2016/dsa-3442nvdThird Party Advisory
www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.htmlnvdThird Party Advisory
www.securityfocus.com/bid/80703nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1034657nvdThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-2868-1nvdThird Party Advisory
blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/nvdThird Party Advisory
blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/nvdThird Party Advisory
kb.isc.org/article/AA-01334nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.061
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000